HP HPE6-A81 Aruba Certified ClearPass Expert Written Exam Exam Practice Test

Edit the creetoraccepiterms form field in register page and change HTML section by pointing the hyperlink to the HTML file uploaded

Edit the accept_terms form field in receipt page and change HTML section by pointing the hyper link to the HTML file uploaded m Guest Manager

Create an HTML page with custom terms and condition and upload it to public files under Clearpass Guest -> configuration -> content manager

Edit the creatoracceprterms form field in receipt page and change HTML section by pointing the hyperlink to the HTML file uploaded

Create an HTML page with custom terms and condition and upload it to private files under Clearpass Guest -> configuration -> content manager

configure a Report using Radius Failed Authentication template and schedule it to run every 5 mins

configure an Alert using Failed Authentication template with Threshold 1. Interval 5 mins

add the user name in the Insight/Alert/Watchlitst and get the authentication failures notifications within 30 seconds

add to ClearPass Insight Dashboard the Authentication Status widget for this specific user

Change the service condition to Radius:lETF Calling-Station-Id EQUALS Secure-ADM-5007

Update the service condition Radws:IETF Called-Stat ion-Id CONTAINS secure-AOM-5007

Remove the service condition Radius:IETF Service-Type BEL0NGS_T0 Login-User (1), 2.8

Make sure that the Network Devices entry for the Cisco WLC has a vendor setting of "Airespace"

Verify the CPPM hostname in OSCP URL under TLS authentication method is updated to localhost instead of primary server's hostname.

Reboot the active ClearPass server and reconnect the client to the SSID by selecting the correct certificate when prompted.

Check if a DNS entry is available for the ClearPass hostname in the certificate, resolvable from the DNS server assigned to the client.

Check EAP certificate on the secondary node is issued by the same common root Certificate Authority (CA).

From the weblogin/ self-registration page NAS Vendor settings, enable the check box for "The controller will send the IP to submit credentials" under Dynamic address.

Edit the HTML header in the weblogin/ self-registration register page with a script to match the controllers IP and captive portal certificate CN names respectively.

From the Aruba controller, enable the option "Add switch IP address in the redirection URL" under the respective L3 Authentication profile mapped in the initial role

From the Aruba controller, enable the option 'Add switch ip address in the redirection URL' under the respective guest AAA profile mapped in the VAP profile.

Add all the controller IP address and its certificate common names in the DNS server's Forward Lookup Zones and Reverse Lookup Zones to resolve queries from client.

From the weblogin/ self-registration page Login form settings, enable the check box for "The controller will send the IP to submit credentials" under Dynamic address.

Administering downloadable user roles can be difficult for a large enterprise.

Can be applied only on ports or WLAN users authenticated by ClearPass.

Can use these result for other authentication methods not involving ClearPass.

Aruba downloadable user role are universally available across the environment.

Aruba downloadable user role is a built in enforcement template in ClearPass.

Downloadable role names must be defined in Aruba switch or controller.

An additional authorization source should be configured for profiling to work.

The enforcement policy rules evaluation algorithm is not configured correctly.

The option, use cached roles and posture from previous sessions should be enabled.

The enforcement policy conditions configured with profiling data are not correct

Clear Pass Profiler Database

Endpoint Database

Local User Database

Guest Device Database